Fix FN matcher-request

main
Ritik Chaddha 2024-07-30 12:58:50 +05:30 committed by GitHub
parent e72b8e49ef
commit 1cfd71828c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 6 deletions

View File

@ -1,16 +1,17 @@
id: CVE-2024-6366 id: CVE-2024-6366
info: info:
name: User Profile Builder < 3.11.8 - Unauthenticated Media Upload name: User Profile Builder < 3.11.8 - File Upload
author: securityforeveryone author: securityforeveryone
severity: high severity: high
description: | description: |
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
reference: reference:
- https://nvd.nist.gov/vuln/detail/CVE-2024-6366
- https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/ - https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
- https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-6366 - https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-6366
- https://nvd.nist.gov/vuln/detail/CVE-2024-6366
classification: classification:
cve-id: CVE-2024-6366
epss-score: 0.00043 epss-score: 0.00043
epss-percentile: 0.09351 epss-percentile: 0.09351
metadata: metadata:
@ -28,15 +29,13 @@ variables:
http: http:
- raw: - raw:
- | - |
GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1 GET / HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'contains(body,"User Profile Builder")' - 'contains(body,"/plugins/profile-builder")'
- 'status_code == 200'
condition: and
internal: true internal: true
- raw: - raw: